Identity Data
How author identity is verified, what is retained, what is deleted, and when it may be disclosed.
The identity check
A government photo ID is checked against a live or recorded presence check. The ID image is deleted after verification; only the result flag, ID type, and date are retained. A working email plus one additional channel is confirmed. Public name, bio, and credentials are checked for consistency with the verified identity; discrepancies are noted and resolved.
Pen names
The legal name is linked on file confidentially. The public record shows “pen name — identity verified.” The link is never included in a record, API response, search index, or log.
Credentials
Credentials are confirmed with the issuing body or public record; unverifiable credentials are removed from the work or listed as unverified.
Validity
Verification is valid for three years, then refreshed.
Storage and access
Identity data is held in segregated tables, encrypted at rest with separate keys. Every access is logged with the person and the reason. Staff see legal names only on the identity screen, never in lists or exports.
Disclosure
Identity data is disclosed only under legal compulsion, decided by the owner and logged internally.